Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9387863c-57eb-495e-863a-5f309d45c90f.roa
File: 9387863c-57eb-495e-863a-5f309d45c90f.roa (raw, json)
Hash identifier: AVBWVh3RGNlKaH7f5XxCmTN+QO+bvhb+UbBktK9GjCw=
Subject key identifier: 27:40:29:EE:15:2E:33:D2:40:19:24:57:6C:94:63:BB:59:05:E1:30
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 2A612ABF17EE592D0AE3289D4A2CC31618DCEF4D
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9387863c-57eb-495e-863a-5f309d45c90f.roa
Signing time: Thu 30 Jul 2026 01:30:58 +0000
ROA not before: Thu 30 Jul 2026 01:30:58 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:6800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:61:2a:bf:17:ee:59:2d:0a:e3:28:9d:4a:2c:c3:16:18:dc:ef:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:58 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=efb32d81d3d7ddd4b381a2b8c91159c70c2388b2875b9ee130069a863addbf31, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:b9:dc:41:a6:c4:af:2c:97:58:7d:10:36:
7d:3c:b8:a4:19:70:01:47:0a:c5:5a:c7:ea:a3:fa:
b7:d8:d8:0e:2a:99:78:e2:95:85:82:9d:f1:46:27:
ab:88:68:ee:de:05:9b:83:07:59:e8:d2:99:9d:02:
b2:ad:93:1f:11:5e:a7:61:ff:31:19:99:f0:5e:fc:
6e:7c:af:36:25:96:1f:df:d2:24:61:d1:02:c6:dd:
91:b9:92:1c:95:1e:a6:e7:88:57:20:02:ef:b6:f3:
c5:c5:a7:8a:3c:fa:36:67:da:41:72:11:cb:43:b2:
cb:43:3e:06:d4:fe:47:b9:0a:4a:2c:4c:db:c9:c0:
bd:00:61:3e:2f:dc:ef:d3:a1:4e:7f:d3:5c:1b:3d:
0f:69:8e:94:20:15:08:c4:8e:bf:30:b2:9a:98:b2:
06:8a:52:91:8f:b0:c7:be:bb:09:15:96:55:f0:48:
5b:63:2d:4d:02:9a:0d:a6:e3:9a:e7:dc:7f:ff:74:
1f:20:3d:80:b2:13:3a:f7:28:5e:5a:a7:b7:6d:42:
2a:1a:ac:e6:d2:ff:c8:9f:5c:8a:b0:0c:90:be:12:
54:1f:a8:01:0b:ce:05:a9:97:ae:b1:78:f7:e8:63:
7b:d1:8b:5e:0e:d7:15:27:20:e3:ef:9f:af:70:03:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:40:29:EE:15:2E:33:D2:40:19:24:57:6C:94:63:BB:59:05:E1:30
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9387863c-57eb-495e-863a-5f309d45c90f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:6800::/40
Signature Algorithm: sha256WithRSAEncryption
cd:0a:50:d9:f8:31:e0:9e:12:a4:2b:8d:d4:dc:4b:b2:1e:b2:
f7:4a:6e:a0:50:2f:94:2e:37:64:c8:36:ea:44:62:13:38:2a:
c8:4e:4b:e2:eb:ec:c6:1c:ce:90:4d:f2:fd:db:79:3c:3c:40:
20:0a:36:4f:f8:f6:1e:5b:ab:73:c9:bd:1f:26:50:88:9a:a3:
6c:7b:92:01:6b:d4:be:29:17:dd:98:f1:66:f6:98:be:34:13:
76:7b:a0:4f:ca:00:fb:da:91:04:a6:a6:43:65:72:23:03:2d:
55:18:81:11:a4:9e:db:2e:34:5d:14:76:fe:20:24:7c:4b:44:
07:9c:ab:f3:7c:02:4b:ea:c1:d2:3c:50:51:e7:78:bc:67:0d:
1e:b5:a7:79:7d:a1:6a:75:65:49:0d:6d:2a:2e:5b:32:c6:14:
b8:f1:a7:79:4c:7d:82:d6:2c:28:11:70:7d:ea:8b:04:d4:34:
df:63:1e:8b:3e:b6:0b:a3:84:7d:0f:50:19:6a:18:1f:00:11:
a8:10:e1:92:a8:52:39:41:82:bf:7d:ba:0d:9e:32:ed:70:9a:
49:fd:60:3d:64:11:2f:f7:43:28:53:db:83:47:ad:30:59:f4:
a5:5f:a8:7f:71:87:1b:ad:b9:94:24:82:93:09:bf:b0:9b:e3:
27:9e:77:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:15:16 2026 by rpki-client